Solved

DNS error 32 attempting to load zone

Posted on 2011-02-15
3
2,035 Views
Last Modified: 2012-05-11
Event Type:      Warning
Event Source:      DNS
Event Category:      None
Event ID:      4521
Date:            2/15/2011
Time:            2:35:22 PM
User:            N/A
Computer:      MARS
Description:
The DNS server encountered error 32 attempting to load zone . from Active Directory. The DNS server will attempt to load this zone again on the next timeout cycle. This can be caused by high Active Directory load and may be a transient condition.


The thing that looks strange to me, the _msdcs under domainname.local is grayed out. I have been through SEVERAL posts and forums trying to find a solution to this problem and no luck.
0
Comment
Question by:gwermter
  • 2
3 Comments
 
LVL 7

Accepted Solution

by:
BobintheNoc earned 500 total points
ID: 34900295
If there is corruption within DNS portion of AD, probably the simplest thing to do is to delete the zone and allow the DC to recreate it.  The re-creation will be automatic, as soon as a DC attempts to register it's SRV records.  Once the zone has been recreated, it'd be good to restart NETLOGON on all other DCs and Member servers so that they reregister their appropriate records.

Otherwise, you might be looking at having to do an Authoritative Restore after restoring the system state of one of your DCs from a backup prior to the failures.
0
 

Author Comment

by:gwermter
ID: 34900465
It would be considered ok to delete the primary zone in DNS?
0
 
LVL 7

Expert Comment

by:BobintheNoc
ID: 34903581
Safe is a relative word.  There will be a timeframe while the zone is being recreated and it will take a bit of time for each client to reregister.  During this time, DNS queries may not return results.  

How many DCs do you have and how large is your environment?  If you're an enterprise, this could be bad to do during production time.   If you're a small environment, you can be recovered within 10 minutes or so--especially if you stage your member machines to reregister right after the zone is recreated when you have a DC reregister itself.  If you've got multiple sites, replication links may fail.

In a flat, non-segmented/non-vlan'ed network, Windows is amazingly resilient when DNS doesn't function fully.  NETBIOS/Mailslots announcements are generally limited to the local subnets only.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now